Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9bb608e-c60e-4ceb-b32a-f101c944038d/29a0033e-011d-388f-8797-7e1f26f33d84.roa
File:                     29a0033e-011d-388f-8797-7e1f26f33d84.roa (raw, json)
Hash identifier:          j6ujmdUZwrx8vsCHY0k/eCPQ85x3RUoT417x5QK5pgE=
Subject key identifier:   97:5D:F3:B6:3B:EA:CA:B8:BD:15:13:B6:52:73:49:DB:B4:3C:EE:32
Certificate issuer:       /CN=d9bb608e-c60e-4ceb-b32a-f101c944038d
Certificate serial:       010D0C9F4328584BA5023C3A11B0E22A716EAC40
Authority key identifier: 2D:B4:40:F1:19:22:37:C9:81:F0:FE:41:F6:20:D0:F9:98:47:E4:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9bb608e-c60e-4ceb-b32a-f101c944038d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9bb608e-c60e-4ceb-b32a-f101c944038d/29a0033e-011d-388f-8797-7e1f26f33d84.roa
Signing time:             Sun 26 Oct 2025 01:00:31 +0000
ROA not before:           Sun 26 Oct 2025 01:00:31 +0000
ROA not after:            Sat 24 Jan 2026 02:00:31 +0000
asID:                     395354
IP address blocks:        205.201.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9bb608e-c60e-4ceb-b32a-f101c944038d/d9bb608e-c60e-4ceb-b32a-f101c944038d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9bb608e-c60e-4ceb-b32a-f101c944038d/d9bb608e-c60e-4ceb-b32a-f101c944038d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9bb608e-c60e-4ceb-b32a-f101c944038d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a5:02:3c:3a:11:b0:e2:2a:71:6e:ac:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9bb608e-c60e-4ceb-b32a-f101c944038d
        Validity
            Not Before: Oct 26 01:00:31 2025 GMT
            Not After : Jan 24 02:00:31 2026 GMT
        Subject: CN=3de79294-59e4-4725-8cec-c632796df2e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:87:7c:a0:0e:f8:98:a9:d6:9c:34:68:45:7d:
                    7f:43:39:89:7b:cd:33:e3:fe:39:86:e7:43:54:0a:
                    ae:2f:83:36:7f:6f:65:1b:4f:f6:35:2f:6c:72:dc:
                    fb:5a:28:89:de:0d:53:ba:97:07:93:76:25:88:e9:
                    a5:ca:aa:13:c0:6c:9a:eb:54:e8:cd:c0:07:e3:9b:
                    90:99:00:0a:c7:2f:31:d3:d3:ad:65:d5:6d:6e:a6:
                    49:b1:04:57:14:3c:42:4a:fa:42:ca:ef:e8:3e:68:
                    eb:e7:16:4d:e4:9d:04:7b:61:ea:46:0d:c2:db:48:
                    f6:d9:4e:f5:1f:b8:92:13:e0:5b:57:48:74:79:5e:
                    6d:74:bb:4e:16:dc:4a:b5:52:81:e3:e3:66:3a:58:
                    c3:2c:00:00:6f:75:c2:b9:81:be:8d:03:c3:9a:15:
                    30:8e:22:9b:cb:e0:2b:e2:8e:6f:56:42:9e:00:e6:
                    7a:b4:c6:a6:9d:4a:6b:5d:31:47:9f:8c:0a:f6:e4:
                    c7:5d:13:12:5d:d9:41:66:dc:f3:c5:4b:f6:14:c1:
                    50:5b:4c:bb:6d:75:e9:c9:fc:55:7a:38:28:12:f1:
                    ae:13:7a:19:76:08:fa:29:e8:36:93:15:55:45:5c:
                    bd:47:5e:f3:6e:3e:62:21:c5:ba:9c:8f:74:04:43:
                    a2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:5D:F3:B6:3B:EA:CA:B8:BD:15:13:B6:52:73:49:DB:B4:3C:EE:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9bb608e-c60e-4ceb-b32a-f101c944038d/29a0033e-011d-388f-8797-7e1f26f33d84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9bb608e-c60e-4ceb-b32a-f101c944038d/d9bb608e-c60e-4ceb-b32a-f101c944038d.crl

            X509v3 Authority Key Identifier:
                keyid:2D:B4:40:F1:19:22:37:C9:81:F0:FE:41:F6:20:D0:F9:98:47:E4:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9bb608e-c60e-4ceb-b32a-f101c944038d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.201.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:e6:68:5b:3b:5f:96:1a:0c:98:38:ef:f9:8b:9b:db:64:76:
         99:b0:96:ba:34:10:f1:13:ec:bf:b4:53:f6:36:39:ea:d6:98:
         e1:49:7e:e3:2f:21:c2:80:e6:fe:05:9b:2f:71:ee:f0:1f:18:
         72:85:58:54:ee:99:ad:26:d2:37:a4:2b:53:7c:6a:07:9b:45:
         60:4e:72:2e:ac:d5:97:96:32:d4:96:a0:de:85:77:c0:a5:bb:
         6b:0c:c4:14:b6:3c:60:96:86:62:0c:4a:7e:8b:d1:81:57:12:
         4b:96:54:5d:1e:ba:d0:33:59:94:b1:8e:12:2d:e8:4d:6f:e4:
         75:25:dc:d9:87:f2:34:a7:c1:33:3b:cc:37:10:fa:62:12:74:
         a0:66:1d:56:65:cb:79:a0:9e:5f:85:78:11:40:75:3f:0f:55:
         f2:67:00:17:b0:2d:4c:53:17:90:ac:2d:b8:8f:5a:0d:84:cf:
         87:8f:d3:2f:af:9b:55:bc:bc:eb:e3:72:a3:38:47:0c:30:c2:
         af:c6:88:7b:85:20:2b:e7:2c:f9:1f:e1:04:07:dd:ca:80:db:
         f5:6b:9c:fe:91:7a:06:57:bb:e5:f3:18:bb:e2:e1:90:0b:bd:
         c1:5e:99:d5:50:f0:0d:37:f1:5d:20:15:03:83:e2:70:ff:a2:
         d5:b7:20:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:11:34 2025 by rpki-client